Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Lin Ma b6f97555c7 Bluetooth: use correct lock to prevent UAF of hdev object ... commit e305509e678b3a4af2b3cfd410f409f7cdaabb52 upstream. The hci_sock_dev_event() function will cleanup the hdev object for sockets even if this object may still be in used within the hci_sock_bound_ioctl() function, result in UAF vulnerability. This patch replace the BH context lock to serialize these affairs and prevent the race condition. Signed-off-by: Lin Ma <linma@zju.edu.cn> Signed-off-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-06-10 13:37:09 +02:00
..
bnep
cmtp	Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails	2021-06-03 08:59:06 +02:00
hidp
rfcomm
6lowpan.c	Bluetooth: add a mutex lock to avoid UAF in do_enale_set	2020-08-19 08:15:59 +02:00
a2mp.c	Bluetooth: drop HCI device reference before return	2021-03-04 10:26:14 +01:00
a2mp.h
af_bluetooth.c
amp.c	Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data	2021-03-07 12:20:45 +01:00
amp.h
ecdh_helper.c
ecdh_helper.h	Fix misc new gcc warnings	2021-05-11 14:04:16 +02:00
hci_conn.c	Bluetooth: Disconnect if E0 is used for Level 4	2020-10-17 10:11:22 +02:00
hci_core.c	Bluetooth: fix the erroneous flush_work() order	2021-06-10 13:37:09 +02:00
hci_debugfs.c
hci_debugfs.h
hci_event.c	Bluetooth: verify AMP hci_chan before amp_destroy	2021-05-14 09:44:10 +02:00
hci_request.c	bluetooth: eliminate the potential race condition when removing the HCI controller	2021-05-14 09:44:10 +02:00
hci_request.h
hci_sock.c	Bluetooth: use correct lock to prevent UAF of hdev object	2021-06-10 13:37:09 +02:00
hci_sysfs.c
Kconfig
l2cap_core.c	Bluetooth: initialize skb_queue_head at l2cap_chan_create()	2021-05-19 10:08:21 +02:00
l2cap_sock.c	Bluetooth: L2CAP: Fix handling LE modes by L2CAP_OPTIONS	2021-05-26 12:05:21 +02:00
leds.c
leds.h
lib.c
Makefile
mgmt.c	Bluetooth: MGMT: Fix not checking if BT_HS is enabled	2020-10-17 10:11:22 +02:00
mgmt_util.c
mgmt_util.h
sco.c
selftest.c
selftest.h
smp.c	Bluetooth: SMP: Fail if remote and local public keys are identical	2021-05-26 12:05:21 +02:00
smp.h